General
Static task
static1
URLScan task
urlscan1
Malware Config
Extracted
Family
quasar
Version
1.4.0
Botnet
TRAINING
C2
185.241.208.185:16145
Mutex
22073971-8d9a-4364-9916-abbb09ac9d8b
Attributes
-
encryption_key
7A9A8376440E3257DB2B54403642F366A5FBE14A
-
install_name
Starter Module.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
Starter Module
-
subdirectory
Modules
Targets
-
-
Target
https://github.com/youvegotpwned/RedEngineCrack/releases/download/fivem/RedEngine.zip
-
Quasar family
-
Quasar payload
-
Executes dropped EXE
-
Drops file in System32 directory
-